Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/aMF2nWqBHIhjk25aiuwSzN7-HfE.roa
File: aMF2nWqBHIhjk25aiuwSzN7-HfE.roa (raw, json)
Hash identifier: IMpF5s/0j570fq7XGWlyuKmW+Kc6O3oORXvCBLA1GSM=
Subject key identifier: 68:C1:76:9D:6A:81:1C:88:63:93:6E:5A:8A:EC:12:CC:DE:FE:1D:F1
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 01972B33A72B1FEEB589AAE2C4869592CBB2
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/aMF2nWqBHIhjk25aiuwSzN7-HfE.roa
Signing time: Sun 01 Jun 2025 11:14:54 +0000
ROA not before: Sun 01 Jun 2025 11:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:33:a7:2b:1f:ee:b5:89:aa:e2:c4:86:95:92:cb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Jun 1 11:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c1769d6a811c8863936e5a8aec12ccdefe1df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:32:18:86:bf:e3:ac:cf:83:50:84:c1:17:
d7:ab:96:8b:e1:49:e6:e3:60:b0:eb:54:95:5c:93:
8b:04:ea:2f:33:ec:64:33:be:70:0e:0a:a3:b1:32:
4e:b5:04:2d:89:65:72:e6:9b:ae:4b:95:18:71:e0:
5f:08:2c:fe:3e:bc:49:b2:18:c8:01:47:fc:de:a1:
fb:fa:41:ac:d0:4b:88:f1:7d:e7:ee:6a:d9:cf:48:
5a:18:b9:16:fe:32:65:8d:d0:d7:2d:ff:69:db:e7:
e0:29:6e:f1:5e:c9:aa:b5:ea:0d:fc:45:01:9e:3e:
3a:87:65:ae:0d:12:47:bb:bf:70:eb:e1:b0:4a:9f:
7e:8b:6e:84:6d:3a:b8:46:94:74:f9:c7:eb:31:d9:
9f:03:52:01:e5:bb:19:e1:3b:a0:06:45:dc:93:50:
14:15:6d:14:d1:31:b9:d8:58:f2:8f:ca:81:ae:ec:
ca:45:d9:b8:ec:63:49:e7:cd:c3:fc:63:61:17:3d:
04:b5:4d:33:3d:c3:7b:37:ce:0e:01:89:f5:1a:68:
19:a6:73:f3:24:fd:27:43:9e:09:71:bb:f9:1e:19:
36:62:f5:b2:af:73:9b:bc:03:92:50:a0:74:3c:e2:
7e:a4:3c:ee:7f:6e:6b:39:94:64:53:14:8b:13:95:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:76:9D:6A:81:1C:88:63:93:6E:5A:8A:EC:12:CC:DE:FE:1D:F1
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/aMF2nWqBHIhjk25aiuwSzN7-HfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:91:d9:5a:cb:38:5a:cc:91:63:31:6c:b8:ac:9e:9c:b8:a9:
6e:a5:22:d3:55:27:ba:36:51:df:4e:8d:53:77:82:b7:b5:f8:
fe:95:d6:b3:5f:c1:6b:ae:61:55:fc:ea:13:b9:1e:2c:9b:10:
35:14:76:6b:d8:cf:e0:2b:cf:f9:b5:56:74:05:b7:f5:d0:75:
77:2a:4b:4a:83:47:97:b6:05:98:01:b7:3d:4d:34:08:18:5c:
88:30:42:25:32:3c:7e:c2:1a:7f:4f:e3:35:0b:5d:9b:52:1e:
47:51:16:ef:16:b2:eb:45:0d:56:d4:03:6d:62:1f:06:f2:5e:
01:15:d9:85:b5:19:09:b1:b5:65:45:5c:d8:eb:62:26:6e:eb:
55:90:ec:f2:98:6e:06:7c:e5:7a:a0:db:89:4a:d7:aa:56:3b:
f4:22:03:a4:3e:0c:dd:00:14:be:6f:71:f9:36:3c:50:12:2a:
8a:4e:21:bf:25:43:bd:22:29:42:10:f6:99:d8:99:67:79:1e:
4d:38:f7:23:43:3b:02:48:64:7e:61:3c:b6:44:97:ff:94:f1:
4f:17:37:f8:80:aa:c4:c3:01:34:c4:67:22:88:bf:17:f2:b2:
2b:7c:c5:3a:d1:95:09:b5:64:07:bf:6c:0e:7f:02:95:57:bb:
75:a2:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 13:00:32 2025 by rpki-client